Security and compliance
Remote safeguards your organisation’s and employees’ confidential HR and payroll information using industry-leading security and compliance measures.
Remote provides a secure platform for payroll, benefits, taxes and compliance, enabling you to grow your international team with confidence. We place the security of your data and your employees' data at the forefront of our priorities.
We are ISO27001 certified, SOC 2 compliant and CSA Star Level 1 accredited, which demonstrates our stringent security policies and procedures.
These accreditations reflect our ongoing commitment to upholding the highest security standards.
Independent third-party auditors regularly review and verify our practices, ensuring a robust and dependable security posture you can rely on.
Our infrastructure operates within isolated networks with restricted, fully auditable access.
We safeguard our systems with advanced firewalls that feature threat detection and prevention capabilities.
For compliance and protection, we use Amazon Web Services as our cloud provider; AWS adheres to the most exacting industry standards: SOC 1, 2, 3; ISO 27001/27017/27018; PCI-DSS
Our dedicated Security team safeguards your organisation through comprehensive security practices.
Application security audits: We assess vulnerabilities and keep audit logs of application access and changes to strengthen network security.
Data security: We treat the protection of personal and employee information with the utmost seriousness, encrypting data both in transit and at rest.
Internal security: We apply the least privilege principle, limiting system access to essential personnel only. All internal tools and systems require SSO, and we run regular recertification and training to uphold our stringent standards.
Collecting and retaining the most sensitive personal information about your organisation and its hires — such as salaries, addresses, bank details and government-issued IDs — requires extreme caution.
Remote Data Protection Guard implements industry-leading policies, processes and controls to ensure compliance with the world’s most demanding privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA asks users to enter a code delivered to their mobile device through an authenticator app such as Google Authenticator or Duo Mobile. SSO can be configured at company level, enabling users to sign into the Remote platform securely with their corporate credentials.
We don’t let our commitment to your data’s security slow you down.
Our tools and processes help us maintain 99.999% uptime.
Our best-in-class product boasts industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, back up data daily, and ship applicational logs off site, where they are kept for 30 days.
Our HR and payroll security policies and procedures are externally validated and certified by the top security institutions in the world.
Remote complies with GDPR by ensuring data remains encrypted and secure no matter where it needs to travel. We empower your employees to modify or delete their personal data upon request, maintaining the highest standards outlined in the GDPR.
All sensitive records, including key documents and data, are encrypted and accessible only to the owner and platform administrators. We reduce exposure by deleting any data not essential for business operations. If you wish to contact us about security, please send an email to [email protected]
Discover Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote offers industry-leading security and reliability.
Get ironclad IP protection that ensures full ownership of what's yours.
Accelerate your global business with confidence.
Remote take the security of it’s customers very seriously and strive to continuously improve it. In this context the work done by the security research community provides an important contribution. If you find a vulnerability that affects Remote, please fill the form below including all the necessary details to reproduce the issue, therefore helping us to fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security refers to the measures a company must take to protect its payroll data and financial assets from potential threats, such as fraud, data breaches, and unauthorised access. It requires the implementation of numerous safeguards, including safe data handling practices, a secure IT infrastructure, and strong security policies and procedures.
Payroll abuse (also known as payroll fraud) occurs when an employee or a malicious party exploits vulnerabilities in a company’s financial management system to misappropriate funds.
Payroll carries a variety of risks, including:
Incorrect calculation of taxes
Failure to comply with local employment laws
Cyber attacks
Human error
Inaccurate record keeping
If your organisation operates internationally, you must understand and comply with the payroll regulations and tax regimes in the countries where your employees are based. Non-compliance can lead to substantial penalties and fines, as well as harm to your reputation.
Outsourcing to an unfamiliar third-party payroll provider can introduce risks including loss of control, data breaches, poor service quality or regulatory non-compliance by that provider. For this reason, it is vital to work with a trusted, dependable supplier.
Finally, be mindful of internal fraud risks, such as:
“Ghost” employees
Falsified working hours
Overstated commission schemes
Manipulation or alteration of pay rates
Payroll records may be compromised in several ways. They can be exposed through insider threats (for example, data theft by a disgruntled employee) or via external attacks. Organisations that rely on outdated systems with known vulnerabilities are especially at risk.
Many breaches occur through the following methods:
Phishing attacks. Attackers can deceive payroll staff into disclosing their login credentials, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can corrupt systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malicious software that infiltrates and encrypts data; attackers typically demand a significant ransom to restore access.
Securing your payroll requires implementing comprehensive security measures, including:
Strong encryption
Multi-factor authentication
Strict access controls
Robust firewalls
If you outsource payroll, ensure your chosen platform receives regular updates and strong support, and that ISO-standard security protocols are implemented. You should also provide ongoing training for staff on best security practices, such as creating strong passwords and recognising phishing attempts.
Finally, assess the continued effectiveness of your security through periodic audits and risk assessments.